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Amendments to the Claims: 

This listing of claims will replace all prior versions^ and listings, of claims in the application: 
Listing of Claims: 

1 . (Currently Amended) A method of protecting a usemame during authentication, 
the method comprising: 

obtaining a plain text username over a secure communication channel; 

obtaining a server identifier for a server; 

obscuring the plain text username using the server identifier; 
providing the obscured username and the plain text username to the 

server; and 

communicating authentication information including plain text 
unencrypted information and the obscured username over a non-secure 
communication channel from a client. 

2. (Original) The method of claim 1 , wherein the server identifier is a "uniform 
resource locator (URL) corresponding to the server. 

3. (Original) The method of claim 1 , wherein the server identifier is an 
authentication domain corresponding to the server. 

4. (Original) The method of claim 1, wherein obsciuring the plain text username 
using the server identifier comprises encrj^ting the plain text username using an encrjrpdon 
method. 

5. (Original) The method of claim 1, wherein the encryption method is advanced 
OTcryption standard (AES). 
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6. (Original) The method of claim 1, wherein the client is a wireless device. 

7. (Original) The method of claim 1, wherein obtaining a plain text username over a 
secure communication channel comprises establishing an encrypted commimication session 
between the user and the server and communicating a plain text username ftom the user to the 
server. 

8. (Original) The method of claim 1, wherein the authentication information satisfies 
a plain text, imencrypted authentication scheme, 

9. (Original) Hie method of claim 1, wherein the server identifier is a combination 
of an authentication domain and a uniform resource locator (URL) of the server. 

1 0. (Currently Amended) A username protection process comprising: 
registering a user with a selected server by requesting and receiving a 

plain text user Identifier, creating an obscure version of the plain text user identifier, 
and storing the plain text user identifier and the obscure version of the plain text 
user identifier on the selected server; and 

initiating a communication session between the user and the selected 
server by the communication of the obscure version of the plain text user identifier 
and plain text unencrypted inforrtiation over a plain text communication channel. 

1 L (Original) The process of claim 10, wherein the user is a wireless client device 
communicating over anon-encrypted channel. 

12. (Original) The process of claim 10, wherein communication over a plain text 
channel involves the obscure version of the plain text user identifier and communication over a 
secure channel can use the plain text user identifier. 
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14. (Currently Ameaded) A system for protecting a usemame during authentication 
over a non-encrypted channel, system comprising: 
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1 3, (Original) The process of claim 10, wherein the obscure version of the plain text 
user identifier is stored on the user device. 



a client device being configured to communicate plain text unencrypted 
information over unsecure communication channels using an obscured user 
identifier; and 

a server having stored therein a plain text user identifier communicated 
by the client device over a secure communication channel and aft the obscured user 
identifier corresponding to the plain text user identifier. 



^ - (Original) The system of claim 14, further comprising a registration device being 

configured to communicate infomiation oyer secure communication channels. 

^^'^^^^^^^ ^^ II I ^ ^ 

16. (Original) The system of claim 15, wherein the client device and registration 
device are the same device. 

17. (Original) The system of claim 14, wherein the client device does not encrypt 
communication when commimicating with the obscured user identifier created firom the plain 
text user identifier. 

18. (Original) The system of claim 14, wherein the client device has stored therein the 
plain text user identifier and the obscured user identifier. 

19. (Original) The system of claim 14, wherein the obscured user identifier 
corresponding to the plain text user identifier is created by encrypting the plain text user 
identifier with a key. 
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20. (Original) The system of claim 1 9, wherein the key is based on the uniform 
resource locator (URL) of the server or an authentication domain of the server. 
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